Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nEWmVHFLMioS5zqJah3rltH0YwI.roa
File: nEWmVHFLMioS5zqJah3rltH0YwI.roa (raw, json)
Hash identifier: FgyH1u7FZiaHbESkPlXVNczxzdjU1di3rf8snfxebSI=
Subject key identifier: 9C:45:A6:54:71:4B:32:2A:12:E7:3A:89:6A:1D:EB:96:D1:F4:63:02
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A12E0B4F2050A411A6A1312D34176ED4DB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nEWmVHFLMioS5zqJah3rltH0YwI.roa
Signing time: Mon 12 Oct 2026 02:57:35 +0000
ROA not before: Mon 12 Oct 2026 02:57:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 189.73.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:0b:4f:20:50:a4:11:a6:a1:31:2d:34:17:6e:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 12 02:57:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c45a654714b322a12e73a896a1deb96d1f46302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:d7:73:40:06:30:48:92:b1:51:8f:e0:fc:
f5:22:40:e8:4c:87:e4:0a:6e:31:2f:90:26:dd:81:
27:3b:81:a5:ff:31:40:9a:5e:79:5f:3a:e4:e8:ae:
05:93:0b:ea:d0:1c:e7:d1:c1:2d:8d:5a:d1:e9:9c:
3c:33:20:8a:fd:e6:f2:99:a9:0e:6d:b6:51:8d:44:
9f:bb:71:bb:cc:13:10:57:9f:d0:b5:0b:2f:11:99:
14:3a:b9:f6:b7:15:33:fc:9e:76:2c:62:86:f8:bc:
fe:78:38:da:37:58:cb:49:18:4d:57:56:76:7d:0a:
a6:01:d2:6f:d1:8b:e4:1f:8e:08:28:a9:c6:67:84:
ab:07:58:ef:9e:ef:f1:5e:32:ae:5d:26:91:5f:48:
94:db:ee:a5:6f:44:74:35:bd:11:42:50:09:95:25:
e0:76:a6:e3:4c:12:7a:05:30:e3:7d:08:78:ba:5c:
3d:c4:7e:08:e3:ef:ee:da:a6:c0:4e:31:2f:be:6f:
df:2b:dd:7c:aa:ef:c0:05:05:fb:18:40:6c:ee:bd:
0e:bc:ba:cb:5b:bc:75:a3:1c:cc:fb:c6:8d:6e:05:
47:19:56:d3:96:6e:a8:ba:86:5d:5e:48:60:dd:de:
a6:7c:03:10:b4:83:de:0d:f1:cd:6f:85:5f:1c:51:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:A6:54:71:4B:32:2A:12:E7:3A:89:6A:1D:EB:96:D1:F4:63:02
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nEWmVHFLMioS5zqJah3rltH0YwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.25.0/24
Signature Algorithm: sha256WithRSAEncryption
df:4b:8a:84:2e:6b:cc:77:80:98:35:84:01:ac:a4:76:65:af:
ea:28:cc:76:e4:aa:26:21:fe:d5:03:89:31:1b:39:e3:e1:81:
58:15:fd:77:43:5e:3d:05:aa:1b:e9:c2:1e:2a:49:4f:41:ee:
e2:fe:10:50:b2:88:78:08:df:da:70:64:eb:c7:bd:5f:ad:94:
53:55:df:4b:45:43:a4:10:ae:27:fd:60:2e:03:a9:ae:cf:5c:
20:3d:92:2c:cb:87:e5:d8:20:52:f8:18:a4:32:c9:e4:c8:e4:
db:1f:17:1b:f7:64:a5:8e:99:df:32:51:8c:c6:da:1e:75:55:
eb:ea:79:87:23:3f:1c:fc:1e:18:93:6a:d7:2b:52:4b:03:b8:
02:62:f4:a5:58:5d:4f:25:00:89:61:ad:57:ef:ed:a8:fc:7f:
10:06:17:ea:66:33:86:a6:b8:68:e2:a5:fc:f8:e3:c8:3a:41:
53:82:f1:90:bb:f3:39:02:8d:a3:43:78:79:b0:20:b3:fe:37:
05:f2:18:92:cc:0b:28:29:87:8c:2f:a8:77:08:11:03:67:0c:
e0:93:e7:f5:5c:ca:45:d8:9a:00:c0:92:ed:89:8e:38:6f:47:
50:d7:41:1f:e8:a0:3f:82:4a:5f:50:46:37:06:dd:9c:ba:17:
76:68:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:24 2026 by rpki-client